Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer
File:                     8af9792c-adf8-459e-a0ad-6c60ded9e25d.cer (raw, json)
Hash identifier:          mSNt1OCqVUfc3rSiag21gTzpBMBPwNohkKb/BkiaWTQ=
Subject key identifier:   FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858470F39EF6543F2830581C61480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 31 Aug 2024 14:13:48 +0000
Certificate not after:    Fri 04 Dec 2026 15:13:48 +0000
Subordinate resources:    AS: 54740
                          IP: 2607:d140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0f:39:ef:65:43:f2:83:05:81:c6:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 31 14:13:48 2024 GMT
            Not After : Dec  4 15:13:48 2026 GMT
        Subject: CN=8af9792c-adf8-459e-a0ad-6c60ded9e25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:72:6f:ce:f6:e6:dd:55:8c:02:82:0e:81:0f:
                    b0:a4:bc:36:ea:22:2a:2b:58:d5:ca:e7:20:6b:a1:
                    0a:98:02:94:d4:ed:8e:16:70:a5:e4:7e:56:a4:62:
                    eb:46:54:60:e2:42:22:f0:0f:c8:c9:d3:cd:24:62:
                    ce:a4:1e:5a:a9:70:46:fc:c0:b4:3b:4e:a2:ab:4c:
                    fe:fa:c7:a2:3f:52:8b:26:42:82:67:9a:49:29:3c:
                    2c:7d:20:af:78:7f:d3:76:d2:09:88:fa:5c:f0:02:
                    5e:58:ff:1c:b4:64:e8:ad:bf:b3:92:94:30:2c:27:
                    13:a2:2b:16:f4:ca:b2:eb:2f:34:78:bb:66:62:de:
                    39:aa:8d:74:23:fc:8e:f5:f5:1d:10:62:11:2d:a6:
                    00:d2:da:75:42:01:04:88:7c:5d:b7:ff:b3:a7:42:
                    66:c9:e3:7e:39:72:f1:f3:60:ba:11:bc:f3:d2:7f:
                    1c:bd:10:48:d1:ad:e8:1b:cd:f1:1b:75:1b:d7:b8:
                    39:c2:a0:49:b4:ae:40:76:d8:aa:b2:6f:f3:2c:45:
                    61:c5:ab:5f:8b:4b:1e:06:02:c1:2c:20:fc:c6:b9:
                    83:f2:f0:6c:39:9b:41:57:5f:87:ff:f3:07:6d:38:
                    80:b8:c5:b8:3c:0b:20:55:31:8d:d1:59:a5:5b:78:
                    18:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:99:54:4D:78:B2:74:D3:1B:7F:3B:EA:28:15:7A:BE:3B:C3:64:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8af9792c-adf8-459e-a0ad-6c60ded9e25d/8af9792c-adf8-459e-a0ad-6c60ded9e25d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54740

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:f3:9d:f2:f6:08:5c:2c:1b:ce:85:a0:d5:fb:3b:4c:7c:
         5d:7b:f8:e6:f6:0b:fe:f1:e3:65:81:11:1e:f8:62:d9:6b:66:
         01:8e:29:78:6f:aa:98:0d:1c:8e:b2:42:c4:e3:0c:e5:f9:bb:
         37:ee:74:97:f1:bd:f2:bf:f2:ef:7e:76:c8:14:87:d1:e6:39:
         68:64:3d:7e:7f:89:19:fc:63:fa:e4:7c:fe:38:c8:c9:c4:f8:
         17:e2:b4:e3:44:bb:0f:b0:08:66:fb:84:4a:3e:e6:81:f2:ce:
         2b:00:41:47:15:c9:c0:d0:20:40:c5:d4:3c:97:89:a5:77:30:
         5f:98:7d:00:4b:1a:0d:ec:68:d9:e9:48:8f:e4:10:50:6b:04:
         de:80:8d:da:88:3d:06:ba:c1:cc:d4:76:92:8a:50:4a:f6:da:
         f2:d8:73:e6:b5:94:1d:5b:bc:35:e9:d7:a2:70:89:8c:3f:f7:
         4e:84:93:2b:3b:bc:dd:2a:a4:57:14:83:f1:d3:46:05:7a:b0:
         06:54:29:d9:71:fa:a8:86:0b:07:5a:93:ca:58:aa:1b:ca:4a:
         0d:ed:2e:8b:c1:93:b8:30:ee:3d:e3:01:98:0f:45:22:8f:14:
         5e:fe:fb:a0:91:5b:19:cb:d4:b3:72:36:ae:54:90:a0:de:74:
         87:39:1b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----